Activate and Launch Prisma SD-WAN

• Launch Prisma SD-WAN

  If you have purchased your Prisma SD-WAN license and ION devices before March 2021, and your tenant is not TSG, you have a direct link to launch the Prisma SD-WAN. Starting September 2021, you will be associated with a Customer Support Portal (CSP) account in the Palo Alto Networks Hub. You can now launch Prisma SD-WAN through the Palo Alto Networks hub also.

  However, you must have the CSP sign-in credentials to sign in to the Palo Alto Networks Hub.

  1. Contact your Sales Engineer for the sign-in credentials for the Customer Support Portal (CSP).
  2. After you obtain the Username and Password, sign in to the hub using the provided credentials.
  3. Click the Prisma SD-WAN tile to launch the Prisma SD-WAN web interface. There is no activation required.
  4. Read and agree to the End User License Agreement to launch the Prisma SD-WAN web interface.

  • When you sign in to your Customer Support Portal account, click MembersManage Users to edit the user roles of the users from Edit User.
  • If you have the Super User role, then you can click MembersCreate New User to add a new user in the CSP account. We recommend only one Super User role in the CSP account. With a Super User role in the CSP account, you have a Tenant Super role in the Prisma SD-WAN application. You can optionally create a new user in the CSP account as a Standard User who has view-only permissions in the CSP account. However, the new Standard User created in the CSP account can then be changed to IAM Administrator, Network Administrator, Security Administrator, or View-only User in the Prisma SD-WAN application as per the previously existing user roles for that user in Prisma SD-WAN.

  • The existing users in the Prisma SD-WAN application are not migrated to the CSP account and the existing user roles and privileges continue to remain unchanged. You can create a new user in the CSP account as a Standard User, who can then launch Prisma SD-WAN from the Hub. A new user created in the CSP account has a corresponding new user created in the Prisma SD-WAN application also. Thus, you may find duplicate user roles in the Prisma SD-WAN application if the existing user roles in Prisma SD-WAN are created by the same name in the CSP account also.
  • The user roles seen in the Prisma SD-WAN application and the CSP account may not map to each other with similar user roles. Thus, any change made to the user role in the Prisma SD-WAN application will not reflect in the CSP account user role for the same user.
  • If you delete a user in the Prisma SD-WAN application, you must manually delete the same user from the CSP account.
• Activate and Launch Prisma SD-WAN.

  If you have purchased your Prisma SD-WAN license and ION devices after March 2021, and your tenant is not TSG, your order fulfillment email includes a magic link. This magic link enables you to activate your license from a tile on the Palo Alto Networks hub.

  To enable Prisma SD-WAN functionality, you must activate the Prisma SD-WAN Bandwidth or Data Center license license using the magic link you received from Palo Alto Networks. Without activating these licenses, only a base tenant will be created, which will not have full Prisma SD-WAN functionality.

  1. Activate Prisma SD-WAN.

     1. Click the magic link.
     2. Select Prisma SD-WAN.
     3. Click Start Activation to activate the product.
  2. Select a customer support account for Prisma SD-WAN.

     1. To assign a customer support account, select a Customer Support Account.
     2. Click Next.
  3. Set up selections.

     1. Select a Region.
     2. Select a value for the Total Number of Anticipated Devices.
        Verify that the hardware device count matches your order.
     3. Agree to the terms and conditions.
     4. Confirm Selections.
        The progress bar indicates the activation status of your product.

     If the activation fails, create an Admin case for assistance. Ensure to take a screen capture of the error. Include the URL and error code in the support ticket or the link from the order fulfillment email, which you used to start the activation process. The URL and error code helps the support engineer troubleshoot the issue.
  4. Launch Prisma SD-WAN.

     Click Launch Prisma SD-WAN to access the Prisma SD-WAN web interface.

     Click the Prisma SD-WAN tile on the hub to launch the application in future.

  After activation of the Prisma SD-WAN application, you can manage user roles in the Prisma SD-WAN application. If you have a Super User role in the Customer Support Portal, then the first time you access the Prisma SD-WAN application through the Palo Alto Networks hub, you will have the Super Administrator role in the Prisma SD-WAN application. If you are not assigned a Super User role in the CSP, you will have a View-only User role in the Prisma SD-WAN application.

  This role can be changed by another user with Super or IAM privileges to any other role defined in the Prisma SD-WAN application. When you next log in to the Prisma SD-WAN application from the hub, you will have privileges in Prisma SD-WAN as defined by your user role.
• Create and activate your Prisma SASE account .

  When your Prisma SD-WAN tenant is migrated to a Tenant Service Group (TSG), you will see this notification when you log in to the Prisma SD-WAN web interface.

  Use the activation link in your email to activate your account.

  1. Click the Activate Account button in your email.

  2. Set your password and then click Create My Account.
  3. Set up multi-factor authentication and then click Finish.
  4. Log in to Prisma SASE.

     Your view of tabs and widgets will be based on your license.